Analyzing BlackMatter Anti-Debug With IDA Pro (Patreon)

Published:

2021-10-15 17:00:15

Imported:

2023-09

Content

In this tutorial we analyze the anti-debug checks in BlackMatter ransomware with IDA Pro. We use static analysis to determine exactly what the checks are doing.

BlackMatter sample:

Malshare Download

Anti-debug feature explained:

Anti-Debug NtSetInformationThread

Anti-Debug NtGlobalFlag

Files

[Patreon] Analyzing BlackMatter Anti-Debug Tricks With IDA Pro

In this tutorial we analyze the anti-debug checks in BlackMatter ransomware with IDA Pro. Expand for more... ----- OALABS DISCORD https://discord.gg/6h5Bh5AMDU OALABS PATREON https://www.patreon.com/oalabs OALABS GITHUB https://github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING https://www.unpac.me/#/ ----- BlackMatter sample: https://malshare.com/sample.php?action=detail&hash=22d7d67c3af10b1a37f277ebabe2d1eb4fd25afbd6437d4377400e148bcc08d6